search

sandboxie-plus / Sandboxie

Sandboxie Plus & Classic
https://Sandboxie-Plus.com
GNU General Public License v3.0
13.69k stars 1.52k forks source link

Will new features be limited behind a paywall? #1388

Closed nulledone closed 1 year ago

nulledone commented 2 years ago

So, I've just installed the latest pre-release version and I'm amazed that you've completed this far. I remember this project back when it first went open source. Anyways, while creating a new box I've noticed that it requires supporter certificate from now on. I just wanted to ask is it for early access or will this program become a freemium software eventually?

Small bug:

DavidXanatos commented 2 years ago

Besides, there's a more secure method for some modern platforms. > https://github.com/HypsyNZ/DSEDodge-Signed-Kernel-Driver

Is that really working did you tried it? Because if that would be true it would make https://github.com/HyperSine/Windows10-CustomKernelSigners obsolete.

If that would work it would be a great think for users ownership over their own hardware, but somehow I feal like Corporations don't want us to own anything especially not our universal computing devices.

eebssk1 commented 2 years ago

Besides, there's a more secure method for some modern platforms. > https://github.com/HypsyNZ/DSEDodge-Signed-Kernel-Driver

Is that really working did you tried it? Because if that would be true it would make https://github.com/HyperSine/Windows10-CustomKernelSigners obsolete.

If that would work it would be a great think for users ownership over their own hardware, but somehow I feal like Corporations don't want us to own anything especially not our universal computing devices.

It does not work unfortunately

LuciferSam86 commented 2 years ago

Besides, there's a more secure method for some modern platforms. > https://github.com/HypsyNZ/DSEDodge-Signed-Kernel-Driver

Is that really working did you tried it? Because if that would be true it would make https://github.com/HyperSine/Windows10-CustomKernelSigners obsolete.

If that would work it would be a great think for users ownership over their own hardware, but somehow I feal like Corporations don't want us to own anything especially not our universal computing devices.

I'll update this post since yesterday I succefully added my self signed certificate on the UEFI secure boot without problems and then I'll try with the sample driver in the repo.

Are there guides on how compile Sandboxie Plus? Like if I have to install QT or particular steps to build Sandboxie plus.

DavidXanatos commented 2 years ago

Are you referring to the CustomKernelSigners method with the License hack?

Anyhow to build the core components you need VS 2019 and a resent WDK, for the plus UI you need to install Qt. Really everything you need to know is in the CI workflow: https://github.com/sandboxie-plus/Sandboxie/blob/master/.github/workflows/main.yml The simplest for you is to just for the repo. and let github build the files for you.

LuciferSam86 commented 2 years ago

Nope, I'm not interested into the "license hack" since I found really useful your software and I want to give a small hand. I was more on the signing the driver part without using weird hacks, if someone, like me, would like to study the code and build on myself.

DavidXanatos commented 2 years ago

With "license hack" I meant the part of CustomKernelSigners where you need to hack a protected windows license value to enable the CustomKernelSigners policy.

LuciferSam86 commented 2 years ago

Oh "certificate hack" since it's need an EV certificate for installing such drivers. In that case, yes. But I'm following the guide of this repo: https://github.com/HypsyNZ/DSEDodge-Signed-Kernel-Driver

looks a cleaner and nicer way to do this.

eebssk1 commented 2 years ago

Oh "certificate hack" since it's need an EV certificate for installing such drivers. In that case, yes. But I'm following the guide of this repo: https://github.com/HypsyNZ/DSEDodge-Signed-Kernel-Driver

looks a cleaner and nicer way to do this.

Is this solution working for you? Anyway you can always use EfiGuard as long as HVCI is disabled.

LuciferSam86 commented 2 years ago

Oh "certificate hack" since it's need an EV certificate for installing such drivers. In that case, yes. But I'm following the guide of this repo: https://github.com/HypsyNZ/DSEDodge-Signed-Kernel-Driver

looks a cleaner and nicer way to do this.

Is this solution working for you? Anyway you can always use EfiGuard as long as HVCI is disabled.

This evening I'll try . Since this is pretty OT I'll open a discussion here.

EDIT : Made a discussion so we can keep clean this issue.